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© Elevator diagnostic monitoring apparatus. 

® Apparatus (10) is connected by way of a serial communication link (13) to at least one computer-based 
elevator controller (14-21) in order to monitor the diagnostic output of each connected controller. The diagnostic 
output of a controller is determined in a manner by which the elevator system is modeled as normally operating 
sequentially from state to state in a closed loop sequence of linked operating states. Any deviations from this 
sequence generate diagnostic messages that are communicated from the controller to the monitoring apparatus. 
Also communicated are the last to occur of a plurality of parameter signal state changes. The monitoring 
apparatus processes the diagnostic signals for visual (29) and/or hard copy (32) display to interested elevator 
personnel in a meaningful way. Further, the monitoring apparatus provides a plurality of signals to the elevator 
controller indicative of corresponding reference standards that the elevator controller utilizes in determining the 
occurrence of certain elevator event conditions. 
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Each elevator controller 14-21 contains software that controls the operation of the elevator car and also 
implements enhanced elevator diagnostics as disclosed in the aforementioned commonly-owned U.S. 
Patent No. 4,750,591 to Coste et al. There, a method and apparatus for monitoring an elevator is disclosed 
in which the elevator car is modeled as operating in a closed loop chain of normal operating states. The 

5 controller monitors the states of a plurality of two-state parameter signals, each signal being indicative of 
one of a corresponding plurality of elevator parameters. The identity of a car operating state is determined 
by detecting the satisfaction of a criterion defining a transition either from an immediately preceding 
operating state or to an immediately succeeding operating state. The transition detection is accomplished 
by detecting the parameter signal state or states, alone or in combination, of one or more of the sensed 

w parameter signals that define the satisfied transition criterion, each criterion indicating either a transition to a 
normal operating state in the sequence of states or to an abnormal operating state. The elevator controller 
provides selected message signals in the presence of corresponding selected transitions. A selected 
number of the most recent to occur of certain parameter signal state changes are stored in an event buffer 
and provided as part of the selected message signals. 

75 As a result of the monitoring of elevator operation, the controller software records significant parameter 
signal state changes and analyzes these changes for indication of performance data, alarms, and alerts. 
Such analysis provides error recognition by comparing actual event sequences to predefined valid event 
sequences that are normal to elevator control. Deviations from the pre-defined sequences invoke the alarm 
condition, alert condition, and some system usage accounting messages. Other system usage accounting 

20 messages are integral to normal event sequences. Performance data consists of data such as number of 
runs and number of door operations. An alarm message is associated with certain shutdown conditions 
where a passenger may be trapped in the car. An alert message is an indication that the elevator is 
operating below performance standards. 

Also provided as a part of alarms and alerts are the contents of an event buffer, located inside the 

25 controller, that stores the last one hundred or so significant events (i.e., significant parameter signal state 
changes) leading up to the reported alarm or alert condition. The storing of the last one hundred events 
monitored is particularly advantageous for trouble shooting purposes. 

Monitoring an elevator car according to an operating state model together with storing the most recent 
of selected event occurrences provides a powerful method of diagnosing elevator problems. 

30 In an exemplary embodiment of the aforementioned Coste et al patent, the monitoring of an elevator 
system according to the state machine model is accomplished by a computer-based elevator controller. 
Once transition-significant parameter signals are detected and recorded by the controller, they are analyzed 
for the presence of significant events such as alarm conditions, sub-standard performance conditions 
(alerts), and system usage performance conditions. Diagnostic messages indicative of these conditions are 

35 then communicated outside of the particular controller to the computer 10 for manifestation to elevator 
personnel. Communication of diagnostic messages indicative of problem conditions to an external computer 
provides an improved method of troubleshooting computer-based elevator controllers. 

Fig. 2 is a block diagram of the computer of Fig. 1. The communication link 12 connecting the elevator 
controllers 14-21 together is also connected to communication means 25 inside the computer 10. The 

40 communication means 25 are typically implemented with readily-available dedicated digital line driver and 
receiver integrated circuits marketed by well-known companies such as Texas Instruments or Motorola. The 
communications means 25 are used to receive the messages indicative of enhanced elevator diagnostic 
information transmitted over the communication line 12 from any one of the elevator controllers 14-21. Once 
received, the communication means 25 decodes the message signals and provides signals indicative of the 

45 decoded messages to a central processing unit (CPU) 27. The CPU is typically implemented with any well- 
known microprocessor integrated circuit (IC), such as the Intel Model 80188 microprocessor, together with 
optional support !Cs (e.g.. interrupt controller, direct memory access controller, etc.). 

Table III of the aforementioned Coste et al patent, incorporated herein as Table I, lists exemplary 
messages transmitted to the computer 10 in response to the diagnosis of certain elevator conditions. For 

so example, assume a typical sequence of elevator operating states (reference Fig. 4(a) of the the aforemen- 
tioned Coste et al patent) where the elevator car has stopped at a landing, the doors are closed, and a door 
open command has been received by the elevator controller. The reception of the door open command 
transitions the elevator controller software to proceed from a no door open command state (SO) to a state 
(S1) where the doors are opening and the door fully closed parameter signal is off. The next normal 

55 operating state (S2) is that of the condition where the doors are partially open and are continuing to open in 
response to the door open command. Once the doors are fully open, a transition is made to a state (S3) 
indicative of the doors being fully open and the elevator controller is anticipating a door close command. 
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Upon receiving a door close command, a transition is made to a state (S4) in which the doors are 
partially open and are closing in response to the close command. Once the doors are fully closed and no 
door open command is present, a transition is made to a corresponding state (S5). Then, when a door open 
command is received, a transition is made to the state (S1) in which the door open command has been 
received and the door fully closed parameter signal is off. This closed loop sequence of normal car door 



11 



EP 0 367 388 A1 



70 



operating states is the expected sequence for a normally operating elevator car. 

Connected with certain ones of the state transitions are output functions performed by the elevator 
controller. For example, upon the transition from state SO to state SI. a timer, implemented either in 
hardware or software, would have been started. Then, from the time the door open command is received in 
state SO, through intermediary states S1 and S2, until the time the door fully open condition is sensed in 
state S3, the timer is in operation. Once state S3 is reached, the timer value is compared to a preselected 
time limit for door opening. If the time limit is exceeded, then the elevator controller sends a selected 
maintenance request message over the communication link 12 to the communication means 25 inside the 
computer 10. For the particular situation just described, maintenance message sub-type number thirty 
(reference Table I) is sent. Also, additional data words are transmitted, such as the number of occurrences 
of this particular time limit exceedence along with information that describes the current time limit that the 
actual limit was compared against by the elevator controller, the last time that a failure occurred, and the 
landing of the last occurrence of a time limit exceedence. These transmitted data words indicative of 
enhanced elevator diagnostics are then processed by the CPU 27 either for display on a computer display 
15 29 or for a hard copy printout generated by an externally-connected printer 32. For a laptop-type personal 
computer, the display 29 is typically implemented as an eighty-column by twenty-five-line character matrix 
using liquid crystal display technology. The printer 32 is connected by a communications link 34 to the 
communication means 25. The protocol used for printer communications is typically either that of the well- 
known RS232 serial type or that of the well-known Centronics parallel communications protocol. The printer 
20 can be that of a wide variety of well-known types (e.g., dot matrix, laser, etc.) made by a number of well- 
known manufacturers (Okidata, Epson, Toshiba, etc.). The data words transmitted over the communication 
link 12 from any elevator controller can also be stored in storage means 36 for future manipulation and 
reference. The storage means 36 are typically comprised of several types of electronic storage media: 
volatile random access memory (RAM) for temporary storage and manipulation by the CPU 27; magnetic 
25 storage in the form of floppy disk for non-volatile, transportable storage; magnetic hard disk storage for non- 
volatile, high-volume storage. 

Normally, the apparatus of the present invention is intended to be used either during system 
installation, for periodic evaluation, or for problem site analysis. A typical operating sequence is as follows: 
elevator maintenance personnel physically locate the computer 10 and, optionally, the printer 32 in the 
30 elevator machine room, or in close proximity thereto. The computer 10 is connected to up to eight 
computer-based elevator controllers 14-21 by way of the communication link 12. Typically, an IBM laptop 
personal computer is supplied with at least one communication port implementing the RS232 protocol, and 
at least one communication port implementing the Centronics parallel protocol. The optional printer 32 
connects directly to either a Centronics parallel port or to one of the RS232 serial ports on the IBM 
35 computer 10. Since typically RS422 protocol electronics are not supplied on an IBM personal computer, a 
commonly available RS232-to-RS422 adapter is plugged into one of the RS232 ports on the IBM computer, 
and the RS422 cable implementing the RS422 communication link 12 is plugged into the adapter. 

Once the computer and printer are connected to the elevator controllers, the software program that 
controls the operation of the computer 10 is loaded into the computer 10. Typically, the software is provided 
on a floppy disk which is placed into the system floppy disk drive (i.e., the "A" drive) on the IBM computer 
10. Also, a data floppy disk is loaded into a second disk drive (i.e.. the "B" drive) on the IBM computer 10. 
Electrical power is then applied to the computer 10 and printer 32. 

After powerup. the software offers the user a choice between a configuration program or a monitoring 
program. The configuration program is normally run when it is desired to enter the parameters of the 
elevator installation, or if the user is unsure of the configurations on file, or if it is desired to edit a 
configuration file. The monitoring program is normally run when the configuration file for the particular 
elevator installation has been established and the user desires to extract information from any connected 
elevator controllers. All display of data to the user for subsequent interpretation and/or interaction is 
presented by way of the display 29. 

The type of information normally entered when running the configuration program includes the site 
name, building number, number of cars, and the machine number of each car. This information is entered 
by the user using keystroke entries made on a keyboard 38 of the IBM computer 10. 

Another feature of the configuration program is that, in the aforementioned door open/close sequence 
example, the current door open time limit, that the actual door opening time limit is compared against, is 
one of a plurality of predetermined parameter limit values that can be selected by the user. The user can 
choose to modify default values for the limits of a number of typical elevator operational parameters, as 
listed in Table II along with the corresponding parameter definitions. The chosen default values are entered 
interactively by the user using the keyboard 38 and display 29. Fig. 3 illustrates an exemplary computer 
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screen containing a plurality of typical elevator parameters listed in Table II. The parameters which the user 
can set the current values of are enclosed in rectangles. The particular elevator controller uses the current 
values in determining certain elevator status conditions. These values are communicated by the computer 
10 over the communication link 12 to the particular elevator controller when the monitoring program is 
entered. 

Once the system configuration is complete, the monitoring program is entered wherein the enhanced 
elevator diagnostic information can be extracted from any of the computer-based elevator controllers 14-21 
connected to the computer 10. The information is normally communicated to the computer at five hundred 
millisecond intervals. This transmission rate is strictly exemplary. 
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TABLE II 



Parameter 

POR Message 
Enable 

Event Buffer 
with Alert 



Nudge Threshold 



Excessive Door 
Close Cycles 



Definition 

If enabled, an alarm is generated 
whenever car is powered up. 

If you enter "Y", the program 
will save the event buffer 
associated with each alert 
generated . 

Maximum allowable number of 
consecutive runs in which nudging 
is initiated. If this number is 
exceeded, a front door or rear 
door alert is generated. 

Maximum allowable number of 
instances of excessive door close 
time. If this number is 
exceeded, a front door or rear 
door alert is generated. 



Alert Threshold Maximum allowable number of 

occurrences of any one alert. If 
this number is exceeded, an alarm 
is generated. 

One-Floor Run Maximum time allowed for Time 

monitored one-floor run from 
"start landing" to "end landing". 
If time exceeds given value, an 
alert will be generated. 
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Parameter 

One-Floor Run 
Start Landing 

One-Floor Run 
End Landing 

F Door Close 



R Door Close 



F Door Open 



R Door Open 



Definition 

Start landing for monitored 
one- floor run. 

End landing for monitored 
one-floor run. 

Maximum time allowed for the 
front doors to close. If actual 
time exceeds this limit, the 
Excessive Front Door Close 
counter is incremented. 

Maximum time allowed for the rear 
doors to close. If actual time 
exceeds this limit, the Excessive 
Rear Door Close counter is 
incremented . 

Maximum time allowed for the 
front doors to open. If actual 
time exceeds this limit, an alert 
is generated. 

Maximum time allowed for the rear 
doors to open. If actual time 
exceeds this limit, an alert is 
generated. 
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TABLE II 

Parameter Pefinltjo" 

Deceleration Maximum time allowed for a 

hydraulic elevator to make a 
stop. If this time is exceeded, 
an alert is generated. 



Maximum time allowed for the 
front doors to go through a 
complete cycle of operation. If 
actual time exceeds this limit, 
an alarm is generated • 

Maximum time allowed for the rear 
doors to go through a complete 
cycle of operation. If actual 
time exceeds this time, an alarm 
is generated. 

Maximum time allowed for car to 
complete a run. If actual run 
time exceeds this limit, an alarm 
is generated. 

No Car Response Maximum time allowed for 

clearance of a static door 
failure (i.e., failure of doors 
to open, failure of hoistway door 
interlocks to make, or 
door-related software shutdowns) , 
If trouble is not cleared within 
the timer limit, an alarm is 
generated. 



F Door Cycle 



R Door Cycle 



Run Cycle 
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TABLE II 



Parameter 



Definition 



Emergency 
Button 



Maximum time allowed for "No 
Car Response" if the in-car 
Emergency Stop button is pushed 
when initial problem is detected. 



Group Comm Maximum time allowed from Delay 

detection of a group 
communication failure, until 
failure is cleared. If trouble 
is not cleared within the timer 
limit, an alarm is generated. 

After entering the monitoring program, a main menu appears on the display screen 29, as illustratec Hn 
Fig. 4. This menu lists the options available to the operator for extracting, recording or 
elevator diagnostic data. The software for the computer 10 is designed such that most select ons are 
mZ 2 single keystrokes. For example, upon initially entering the monitoring program, the u er 
typSy depresses the function key "F1" in order to select, from a list that appears on the screen ,tn 
desired I site configuration file developed hereinbefore in the configuration program. This smgle keystroke 

emn T rJ^ZSSS. proper ate configuration file, program operation is returned t^e main 
menu At this point, the user typically extracts data from an elevator controller by one of two methods^ he 
currently Sored historical data in the elevator controller may be of some va ue ,„ | d.agnosing a , reported 
orablem <eo due to an elevator malfunction reported by building personnel), then the user selects F3 in 
to o'S the'evator control system (ECS) for such information; if the meaning , of the a* ,s un now 
(of no interest), then the user selects «F2» in order to "flush" (erase data ^ £o«M£. 
he flush option the user can either save the flushed data on the floppy d.sk portion of the storage means 
S TmT:^o« or the data can be discarded. Also in Je flush option the 
alert conditions received for each elevator car controller from wh.ch data n flushed is indicated on the 

diSP !nt f desired to poll the system for current data (i.e.. real time operation), the user should first flush the 
elevator center of stored data and then begin polling the controller for current data. As a result of the 
t.nno ooeration the screen displays the various operational functions (e.g., mode, motion, status of 
^Z^tZV^ot group status, etc.) of the polled elevator --"J^^ 
alarms or alerts exist for the car. Data transmitted from an elevator controlle to the computer 10 during the 
polling operation is saved in the storage means 36 for further interpretation, if desired. 
P The elevator controller communicates the contents of the controller event buffer o the 1 
the result of either the polling or flush operations indicate alarm or alert conditions. F,g. 5 iHustrate 
comSr screen of the typical contents of a controller event buffer as a result of an alarm or alert condboa 
uZ ie the latest to occur state changes of a number of typical elevator parameters that are monitored 

bV 'S^cSSSS the elevator controlier have been either flushed or polled and subsequently ^aved 
in the Srage means 36. the user is presented with several options for viewing the resulting saved data^By 
iSln^toW from the main menu, the user can display the various types of information transmitted 
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by an elevator controller to the computer 10. For example, either alarms, alerts, and event buffers or. 
alternatively, performance data can be displayed on the display 29, or routed to the printer 32 for a hard 
copy printout. The computer screen (Fig. 5) illustrating event buffer contents associated with resultant alarm 
or alert conditions has been discussed hereinbefore. However, it is also possible to display the contents of 

5 the event buffer regardless of the presence of alarms or alerts. This saves time in that it allows one event 
buffer for one car controller to be displayed without first performing either the flush or poll procedure and 
paging through the resulting event buffers for the data associated with each car controller. 

As a second option, the user can display alarms or alerts together with corresponding causes for either 
the alarm or alert. Fig. 6 illustrates a computer screen associated with an alarm display along with an 

/o optional detailed description of the alarm and the possible causes for it. The display for the alert condition is 
similar. 

Also, the user can display elevator performance data collected during polling. Performance data 
associated with any elevator car is normally saved at the end of the polling session. Fig. 7 illustrates a 
computer screen associated with typical elevator performance data collected during polling of the elevator 

is controller. As with alarms, alerts,. and event buffers, performance data can also be printed out. 

The software which controls the primary computer functions of communicating with the elevator 
controllers 14-21 over the communication link 12, communicating with the printer 32 via either an RS232 
serial interface of a Centronics parallel interface, interacting with the user via the keyboard 38, storing the 
signals indicative of enhanced elevator diagnostic information in memory 36, and processing the display 

20 screens of the display 29 is implemented in a well-known manner that should be readily apparent to those 
skilled in the art in light of the teachings presented herein. A manufacturer such as IBM makes available to 
the public information regarding the interfacing with the computer's disk operating system (DOS) software 
for performing functions such as those enumerated above. The computer software that interfaces with the 
IBM DOS can be written in a designer's choice of a variety of commonly-available computer languages 

25 (e.g.. Pascal, C, Assembler, etc.) made available either by IBM itself or one of a variety of third-party 
vendors. 

Although the present invention has been described in detail in connection with the method and 
apparatus for monitoring an elevator as embodied in a computer-based elevator controller and disclosed in 
the aforementioned Coste et al patent, it is to be understood that the present invention can be utilized in 

30 any type of elevator system which normally operates sequentially from state to state in a closed loop 
sequential chain of linked normal operating states, which system determines the identity of an operating 
state by detecting the satisfaction of a criterion defining a transition from an immediately preceding 
operating state or to an immediately succeeding operating state by detecting the system parameter signal 
state or states, alone or in combination, of one or more sensed system parameter signals defining the 

35 satisfied transition criterion, each criterion indicating either a transition to a normal operating state in the 
chain or to an abnormal operating state, and which system provides selected message signals in the 
presence of corresponding selected transitions. 

As described, the communication link between the computer 10 and a plurality of elevator controllers 
14-21 is implemented with the well-known RS422 communications protocol. 

40 However, any serial or parallel communications protocol can be used; the choice of protocol depends 
on criteria such as the physical environment and communication interfaces available on the system 
controllers and computers. Also, an IBM laptop personal computer is used to extract, record and convey the 
enhanced elevator diagnostic information from eight elevator controllers. However, any number of elevator 
controllers can be interconnected to any one of a number of well-known types of commercially available 

45 computers. Also, it is possible for one skilled in the art to design and build the apparatus of the present 
invention using commonly-available electronic components, or even custom-designed components such as 
gate arrays or programmable logic devices. 

Although the invention has been illustrated and described with respect to exemplary embodiments 
thereof, it should be understood by those skilled in the art that the foregoing and various other changes. 

50 omissions and additions may be made therein and thereto, without departing from the scope of the 
invention. 

Claims 

55 

1. Apparatus for use with an elevator system having at least one car, comprising: 
for each elevator car, signal processing means for monitoring the states of a plurality of two-state parameter 
signals indicative of a corresponding plurality of elevator parameters, said signal processing means 

18 
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determining the identity of an elevator operating state for an elevator car which normally operates 
sequentially from state to state in a closed loop sequential chain of linked normal operating states by 
detecting the satisfaction of a transition criterion defining a transition from an immediately preceding 
op rating state or to an immediately succeeding operating state by detecting the parameter signal state or 
5 states, alone or in combination, of one or more sensed parameter signals defining the satisfied transition 
criterion, each criterion indicating either a transition to a normal operating state in the chain or to an 
abnormal operating state, and for providing selected message signals in the presence of corresponding 
selected transitions; 

for each elevator car, an event buffer, responsive to a selected number of the latest to occur of selected 
w parameter signal state changes, for storing state change signals indicative of said latest parameter signal 

state changes, said event buffer being responsive to said selected message signals for providing related 

buffer message signals corresponding to said stored state change signals; 
■ for each elevator car, communication means, responsive to said selected message signals provided by said 

signal processing means, for transmission thereof, and responsive to said buffer message signals provided 
75 by said event buffer, for transmission thereof; 

characterized by: 

monitor communication means, responsive to each of said elevator car communication means, for decoding 
said transmitted selected message signals and providing decoded signals indicative thereof, and for 
decoding said transmitted buffer message signals and providing decoded signals indicative thereof; 
20 user input means for providing signals indicative of parameter limit values corresponding to parameter value 
transition criterion for said plurality of parameters monitored by each one of said elevator car signal 
processing means; 

display means responsive to said monitor signal processing means; 

monitor signal processing means, responsive to said monitor communication means, for providing signals 
25 indicative of said decoded selected message signals to said display means for display in a predetermined 
form, and for providing signals indicative of said decoded buffer message signals to said display means for 
display in a predetermined form, said monitor signal processing means being responsive to said user input 
means for providing signals indicative of said parameter limit value signals to said display means for display 
in a predetermined form, and for providing said signals indicative of said parameter limit value signals to 
30 said monitor communication means for transmission. 

2. The apparatus of claim 1 , wherein said user input means comprises means for providing keyboard 
input of said plurality of signals indicative of parameter limit values corresponding to parameter value 
transition criterion for said plurality of parameters monitored by each one of said elevator car signal 
processing means. 

35 3. The apparatus of claim 1 or 2, wherein said monitor signal processing means comprises means, 
responsive to said monitor communication means, for storing signals indicative of said decoded selected 
message signals and for storing signals indicative of said decoded buffer message signals. 

4. The apparatus of claim I, 2 or 3 wherein said monitor communication means comprises means, 
responsive to said monitor signal processing means, for providing signals indicative of said selected 

40 message signals to a hardcopy printout device for printout in a predetermined form, and for providing 
signals indicative of said buffer message signals to a hardcopy printout device for printout in a predeter- 
mined form. 

45 
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